Sign In
- Platform
- Solutions
- Modern NDR
- Resources
- Company
Platform
Modern NDR
Resources
Platform
Modern NDR
Resources
DETECTION OVERVIEW
Risk Factors
Devices running Invati Sentry are typically internet-facing, and this vulnerability affects many versions of Sentry. An attacker can exploit this vulnerability with public code to gain complete control of a device.
Kill Chain
Risk Score
87
Ivanti Sentry, formerly known as MobileIron Core, is a gateway for mobile devices. An authentication bypass vulnerability exists in the System Manager Portal because of an Apache HTTPD misconfiguration. This vulnerability enables unauthenticated attackers to remotely run commands through the administrative web UI on port 8443. To exploit this vulnerability, an attacker sends an HTTPS POST request to the /mics/services/MICSLogService API endpoint with the malicious command in the HTTP request body.
